Apple Blocks WireLurker Apps to Help Stop Malware Threat

By Jeff Gamet

Nov 6th, 2014 1:53 PM EST

Apple was Johnny-on-the-spot Thursday morning with its response to the WireLuker malware threat for the iPhone, and has already blocked the trojan horse apps that install it so they can't launch. WireLurker is a malware threat out of China that uses Apple's own provisioning tools to install itself on iOS devices.

Apple blocks WireLurker trojans from launching

An Apple spokesperson told The Mac Observer,

We are aware of malicious software available from a download site aimed at users in China, and we've blocked the identified apps to prevent them from launching. As always, we recommend that users download and install software from trusted sources.

WireLurker uses maliciously crafted Mac apps — primarily pirated apps — to deliver its payload to iPhones and iPads. Apple used its Gatekeeper feature in OS X to block apps with the WireLurker thumbprint, but that doesn't remove infected apps, nor does it help if your iOS device has already been hit.

Since Apple's own provisioning tools are used to push WireLurker onto victim's iOS devices, the next step will be to update those to prevent similar attacks from happening.